Re:Show HN: Evilpass – A slightly evil password strength che...
by Daniel_Marcos on Saturday February 18, 2017 @11:53AM
(#13675458)
Emojis in passwords would both make passwords more secure and easier to remember for some people. The drawback is that they're very hard to enter in normal, physical keyboards.
[ Parent
| on HN ]
Re:Show HN: Evilpass – A slightly evil password strength che...
by Swizec on Saturday February 18, 2017 @12:01PM
(#13675499)
Macs come with a built-in emoji keyboard. Cmd+ctrl+space
But does it really improve security that much? If password is short, it's still gonna be quick to crack.
Re:Show HN: Evilpass – A slightly evil password strength che...
by mcintyre1994 on Saturday February 18, 2017 @01:38PM
(#13675994)
Another problem that's easy to overlook until it isn't is entering your password in front of people - if you're selecting stuff on screen then that's a lot more likely to be seen than typing on the keyboard.
Re:Show HN: Evilpass – A slightly evil password strength che...
by zer0t3ch on Saturday February 18, 2017 @07:25PM
(#13677479)
> If password is short, it's still gonna be quick to crack
Only if the cracker is brute-forcing instead of using common passwords mixed with dictionary words, and if the brute-forcer thought to implement emojis. Given how many emojis there are, it would by psychotic to include them in a brute-force attack unless you already know the person used emojis.
Re:Show HN: Evilpass – A slightly evil password strength che...
by teej on Saturday February 18, 2017 @12:15PM
(#13675586)
There are ~1800 widely supported emojis. That blows out the search space. There are 10^19 possible passwords for a 6 character alphanum+emoji, the same as a 10 character password using just alphanum + simple keyboard symbols.
Re:Show HN: Evilpass – A slightly evil password strength che...
by eslaught on Saturday February 18, 2017 @12:29PM
(#13675638)
But what's the actual distribution of usage of emoji? I'm guessing there is a small-ish set that people actually use, just like there is a small-ish set of words that people will pick from if you ask them to pick a passphrase containing "random" words.
Unless you pick the passphrase for them, you're not really gaining the advantage of the search space size.
Re:Show HN: Evilpass – A slightly evil password strength che...
by MichaelGG on Saturday February 18, 2017 @12:31PM
(#13675646)
Except people will probably stick to a few common ones and do a pattern. Love eyes x2 heart heart, thumbs up -- just like people don't pick words uniformly.
Re:Show HN: Evilpass – A slightly evil password strength che...
by mistercow on Saturday February 18, 2017 @03:28PM
(#13676516)
If they're randomly generated, are they still going to be easy to remember? User-chosen emoji passwords would probably be even weaker than user-chosen passphrases.
Re:Show HN: Evilpass – A slightly evil password strength che...
by mynewtb on Saturday February 18, 2017 @12:03PM
(#13675512)
And a change in keyboard layout or font could easily render the user lost.
Re:Show HN: Evilpass – A slightly evil password strength che...
by grapeshot on Saturday February 18, 2017 @12:06PM
(#13675533)
The other drawback to emojis was that they used to completely crash Chrome's password manager, but I just checked again and it seems it's been fixed.
Re:Show HN: Evilpass – A slightly evil password strength che...
by balladeer on Saturday February 18, 2017 @01:37PM
(#13675988)
I have actually used this ":-) buddha sporty donkey ;-)" for "laughing buddha sporty donkey winking" in the past. Not Emojis though.
PS. No I don't use it anymore. And yes xkcd 936 was my inspiration.